We discuss:
A proposed change to the HIPAA Security Rule, and how it will impact group practices
OCR resuming their HIPAA Compliance Audit program
Updates on telehealth provisions and exceptions for Medicare and important dates to know
Updates on the Counseling Compact and the Social Work Licensure Compact
Upcoming regulatory changes for AI use and our current recommendations
We discuss:
How the feature works and pros and cons compared to similar software
Whether this new feature is HIPAA compliance compatible
What Google Workspace tiers include this new functionality
Usage guidance for this new feature
Our free Google Workspace Resource Center where you can get more support
We discuss:
Instances of monetary HIPAA penalties
Sharing login credentials between workforce members vs with unauthorized third parties
The importance of multi factor authentication
Using the Google Authenticator app for MFA
We discuss:
The recently revealed hack of major global telecom providers
The difference between secure communications and non-secure communications
The difference between HIPAA secure and HIPAA friendly
How clients can opt out of secure communications
Which VoIP services are HIPAA secure (and which major one isn’t)
Reframing HIPAA security as client care
We discuss:
Security policies around network security and device security, particularly BYOD policies
How Private Relay works, and its limitations
How Private Relay is similar to a VPN (and how it is different)
What functionality is required for network and device security
Private Relay alternatives and their limitations
Our recommended VPN service
We discuss:
The common anxieties around corporate/VC owned telehealth companies
The incentives these companies use to lure clinicians
The cracks starting to appear in these companies
How the rate cuts will impact clinicians
How the rate cuts will impact group practices and solo practices
We discuss:
What multi-factor authentication is and why it’s important
Different types of factors for authentication
What Google Authenticator is and how it works
What accounts you can use Google Authenticator for
HIPAA considerations for using Google Authenticator
Using Google Authenticator appropriately in a group practice context
We discuss:
HIPAA regulations vs. state laws
What communications are included in a client’s record and why
The distinction between progress notes and psychotherapy notes
Resources for training your staff on rethinking notes
The Open Notes Rule
Managing documentation compliance in your practice
We discuss:
Common use cases for Gemini in a group practice context
What’s covered under the Google Workspace BAA (and what isn’t)
Ethical and legal considerations for using PHI with AI tools
Informed consent for clients when AI tools are used for clinical documentation
Establishing a Gemini usage policy for your practice
We discuss:
The recent hurricanes impacting the southeast US
Prioritizing access to care
Limited HIPAA waivers for disasters and emergencies
And situations where the waivers would apply
Resources for group practices in and out of the affected areas